Project

General

Profile

Actions
Copy link

Feature #2746

open

Use Available Instruction Set Specialization (AVX2 and AVX512) in Hyperscan when available

Added by booble tins about 6 years ago. Updated over 5 years ago.

Status:
New
Priority:
Normal
Assignee:
booble tins
Target version:
TBD
Effort:
Difficulty:
Label:

Description

https://redmine.openinfosecfoundation.org/issues/2010 provides some context.

The Hyperscan API makes the use of specialized instruction sets relatively straightforward. It provides hs_populate_platform() which returns an hs_platform_info, which can in turn be fed into the various hs_compile calls.

It looks like the HS module in Suricata is currently feeding NULL into these functions eg: hs_compile_multi()

    err = hs_compile_ext_multi((const char *const *)cd->expressions, cd->flags,
                               cd->ids, (const hs_expr_ext_t *const *)cd->ext,
                               cd->pattern_cnt, HS_MODE_BLOCK, NULL, &pd->hs_db,
                               &compile_err);

I'm no C programmer, but this looks like an improvement I should be able to add with context from issue 2010. I've assigned it to myself for now and will see if I can get it going. Reading over this presentation makes it sound like AVX2/512 will be beneficial.

Please advise if this is obviously more complicated than it appears to me.

Actions
Copy link

Also available in: Atom PDF